Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: d5xG5mED5im+0Pe7eW3Qwte5eV+HEQc7fsgylKwzE1U=
Subject key identifier: D2:BE:AD:DF:37:3D:57:9D:AA:4C:67:FA:C0:7A:87:68:B6:9E:38:E9
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 019D277257B52D68AAE5EE712E2D511498DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: 6VySlHrawyiipJoTn1399Uby35f0bNBBSAbw1NqlnU8=)
2: e8E7CZUAUckXh4bcKKwuRzIom-U.roa (hash: lALjysVYHSzqDpZrz4VJufsPGn7d6TgnW+zEsP4UHHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:57:b5:2d:68:aa:e5:ee:71:2e:2d:51:14:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=d2beaddf373d579daa4c67fac07a8768b69e38e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:1b:94:7c:3e:78:93:44:d2:b1:c2:47:fe:
5f:98:17:db:27:40:6c:2e:ae:00:d3:43:22:22:67:
19:71:54:e3:9c:37:83:86:38:1f:51:31:7f:21:f4:
0f:38:8e:e8:9d:f8:53:f9:7a:9a:43:ed:5f:62:e2:
d8:c8:fe:38:37:0e:30:60:6c:77:75:1a:3a:9e:0d:
c9:93:19:32:c8:07:2c:ec:93:79:59:a9:5b:bc:bd:
c9:80:88:d8:51:88:9d:98:36:cb:4f:52:25:2c:27:
82:3f:06:84:0e:45:cf:9d:00:52:82:e0:ba:04:5a:
4b:65:67:51:d5:8f:54:94:14:27:a9:01:6a:67:8d:
7a:8f:84:a5:36:a4:93:3b:ce:95:93:ce:75:31:fc:
93:dd:da:20:16:e3:7c:7e:af:04:1c:74:56:ec:a7:
a2:6e:2b:62:4b:58:48:8b:c8:2d:2c:f5:b7:21:ac:
3f:9d:32:61:2e:81:14:05:2b:fb:75:2c:c4:6d:60:
67:ff:41:4e:fd:9f:7c:c9:7a:ef:ce:8a:b5:1f:ef:
2f:ae:98:37:1a:50:4c:87:64:3a:64:c5:4f:c1:f3:
5f:7d:2b:24:13:d7:4d:87:5b:66:c3:03:05:65:db:
74:b8:05:e6:bc:e8:64:e1:71:f1:9b:f3:cc:c9:e0:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:AD:DF:37:3D:57:9D:AA:4C:67:FA:C0:7A:87:68:B6:9E:38:E9
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:07:86:68:1c:54:be:22:14:2d:ef:b2:33:46:a4:10:cd:
eb:13:63:ed:80:f8:42:97:bf:61:c2:73:16:e6:7f:4a:fd:bb:
ed:e2:b0:de:d5:4a:31:61:27:bb:53:b2:7b:3a:0a:6e:b2:80:
b9:09:2a:4c:74:26:a0:6a:e4:5a:c5:68:be:31:06:40:c6:7c:
f1:43:26:29:c4:e5:d3:c5:eb:a5:0f:fc:de:88:32:d9:13:6a:
20:ca:e7:00:79:65:22:08:0f:d9:9e:82:58:24:6c:21:1d:4f:
cf:53:c9:ee:e6:d2:e7:30:62:f2:2b:5e:03:a0:5b:97:4c:6c:
ca:d6:0d:49:d5:de:44:da:55:e6:1d:4b:4a:be:d9:43:5d:59:
4e:a1:87:f6:44:8f:84:a5:53:14:76:4d:b9:51:71:bf:cf:0e:
c1:41:3a:9f:66:a6:7f:0a:1d:69:db:da:4f:35:ae:54:09:7d:
e5:a5:07:26:90:92:bc:f9:76:d4:61:38:40:7e:16:6b:48:5d:
09:a4:e1:30:7f:1a:97:dd:8e:52:58:b8:43:87:e0:b3:79:29:
21:b8:55:69:82:7c:c7:78:1c:2b:f5:cb:38:f3:6e:01:40:5e:
89:b7:6d:5e:dc:11:d2:f1:56:41:f7:70:a7:84:ef:d2:56:7d:
53:75:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:37 2026 by rpki-client